<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.m-8613371621784521239msolistparagraph, li.m-8613371621784521239msolistparagraph, div.m-8613371621784521239msolistparagraph
{mso-style-name:m-8613371621784521239msolistparagraph;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.m-8613371621784521239apple-converted-space
{mso-style-name:m-8613371621784521239apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><a name="m_-8613371621784521239__MailOriginalBody"><span style="font-size:11.0pt;color:black">Dear EPDP Team-</span></a><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">In our efforts to overcome a significant hurdle through our EPDP work – that CPs have expressed they cannot rely on the accuracy of Registrant input and, therefore, are hesitant to distinguish
between legal and natural persons or count on country information input by Registrant’s because if it is not accurate, they are concerned they will be liable for identifying the person incorrectly or determining the applicable law incorrectly. We have discussed
in the EPDP the prospect of trying to get input from DPAs to confirm that it is reasonable to count on Registrant input. Thomas Rickert has most recently proposed in Barcelona, setting up a meeting with the EDPB and I have expressed my support and desire to
partake in this and the legal effort. In the meanwhile, I think it is beneficial for us to try to do our own research and show DPA insight on this topic. To this end, I provide below, guidance from the ICO on this topic. The IPC/BC wishes to add this to the
Small Team #1and #2 comments in support of our positions on the issues of supporting the distinction of legal and natural persons and applying relevant country laws.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><b><u><span style="font-size:11.0pt;color:#1F497D">The Accuracy of information provided by data subjects</span></u></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><span style="font-size:11.0pt;color:#1F497D">Article 5(1)(d)/(2) GDPR provides that controllers have an obligation to demonstrate compliance with the requirement that: </span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><i><span style="font-size:11.0pt;color:#1F497D">Personal data shall be…accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that
are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’).</span></i><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><span style="font-size:11.0pt;color:#1F497D">According to the ICO, this means that controllers must take all reasonable steps to ensure that the personal data they hold is not incorrect or
misleading as to any matter of fact. However, the GDPR does not explicitly distinguish between personal data provided by the data subject, provided by a third party or created by the controller – the same obligation applies in each such case. </span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><b><span style="font-size:11.0pt;color:#1F497D">As to whether it is possible to rely on the data subject for the accuracy of the information, the ICO has confirmed in its guidance that this
is possible. In particular, the ICO states</span></b><span style="font-size:11.0pt;color:#1F497D"> that: “In some cases it is reasonable to rely on the individual to tell you when their personal data has changed, such as when they change address or other contact
details. It may be sensible to periodically ask individuals to update their own details, <b>but you do not need to take extreme measures to ensure your records are up to date, unless there is a corresponding privacy risk which justifies this</b>.” However,
if the controller learns that information is no longer accurate/up to date (either from the data subject or from other information which comes to light), the controller should update its records accordingly.</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><b><span style="font-size:11.0pt;color:#1F497D">The ICO also recognizes that it may be impractical to check the accuracy of personal data someone else provides. In such cases, the ICO suggests
that controllers must: </span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:1.0in"><b><span style="font-size:11.0pt;color:#1F497D">·</span></b><b><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:#1F497D"> </span></b><b><span style="font-size:11.0pt;color:#1F497D">accurately
record the information provided;</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:1.0in"><b><span style="font-size:11.0pt;color:#1F497D">·</span></b><b><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:#1F497D"> </span></b><b><span style="font-size:11.0pt;color:#1F497D">accurately
record the source of the information;</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:1.0in"><b><span style="font-size:11.0pt;color:#1F497D">·</span></b><b><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:#1F497D"> </span></b><b><span style="font-size:11.0pt;color:#1F497D">take
“reasonable steps” in the circumstances to ensure the accuracy of the information; and</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:1.0in"><b><span style="font-size:11.0pt;color:#1F497D">·</span></b><b><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:#1F497D"> </span></b><b><span style="font-size:11.0pt;color:#1F497D">carefully
consider any challenges to the accuracy of the information.</span></b><span style="font-size:11.0pt;color:#1F497D"> </span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-left:.5in"><b><span style="font-size:11.0pt;color:#1F497D">Given that the data subject itself inputs and supplies the data registration information (elements) in issue, there is a strong argument that
under the above guidance by the ICO, it is reasonable to reply on the accuracy of this information for purposes of distinguishing between legal and natural persons and for purposes of correct geographical information in relation to applicable law purposes.</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:11.0pt;color:#1F497D">Moreover,
</span></b><b><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%">in addition to and to support the above, the IPC and BC further strongly support the following legal recommendation be added
to both Small Team #1 and Small Team #2 input that contractual provisions be added to agreements so that overall accuracy standards are achieved, stating:
<i>The above-identified Registrant represents and warrants that the data provided herein is true, complete and accurate</i>. It could even go one step further and expressly say that
<i>Registrar is entitled to rely on this data in making legal determinations including, without limitation, those related to GDPR and relevant data protection laws</i>. Nothing in the above, limits the application of the ICO guidance from supporting greater
accuracy required by all parties.</span></b><b><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%">Sincerely,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#203864;mso-style-textfill-fill-color:#203864;mso-style-textfill-fill-alpha:100.0%">Diane</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:9.0pt;color:#373737">Diane Plaut</span></b><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#373737">General Counsel and Privacy Officer</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif"><img width="165" height="57" style="width:1.7187in;height:.5937in" id="Picture_x0020_1" src="cid:image001.png@01D472F3.0BEB81F0" alt="cid:image001.png@01D3CA70.18FC1D40"></span><o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="1699" style="width:1274.25pt;margin-left:-5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="1699" style="width:1274.0pt;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#373737">Direct +1 646-899-2806
</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;color:#373737"><a href="mailto:diane.plaut@corsearch.com"><span style="color:#1CA868">diane.plaut@corsearch.com</span></a></span><span style="font-size:9.0pt;color:#1CA868"> </span><o:p></o:p></p>
</td>
</tr>
<tr>
<td width="1699" style="width:1274.0pt;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">220 West 42</span><sup><span style="font-size:7.0pt;color:#989A9B">nd</span></sup><span style="font-size:9.0pt;color:#989A9B"> Street, 11</span><sup><span style="font-size:7.0pt;color:#989A9B">th</span></sup><span style="font-size:9.0pt;color:#989A9B">
Floor, New York, NY 10036, United States</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;color:#373737"><a href="http://www.corsearch.com/"><span style="color:#1CA868">www.corsearch.com</span></a></span><span style="font-size:9.0pt;color:#1CA868"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">Join Corsearch on <a href="https://twitter.com/corsearch"><span style="color:#989A9B">Twitter</span></a> <a href="https://www.linkedin.com/company/2593860/"><span style="color:#989A9B">Linkedin</span></a> <a href="http://trademarksandbrands.corsearch.com/"><span style="color:#989A9B">Trademarks
+ Brands</span></a></span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">Customer Service/Platform Support: 1 800 SEARCH1™ (1 800 732 7241)</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#989A9B">
</span><span style="font-size:9.0pt;color:#989A9B"><a href="mailto:Corsearch.USCustomerService@corsearch.com"><span style="color:#1CA868">Corsearch.USCustomerService@corsearch.com</span></a>
</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#989A9B">Confidentiality Notice:</span></b><span style="font-size:10.0pt"> <span style="color:#989A9B">This email and its attachments (if any) contain confidential information
of the sender. The information is intended only for the use by the direct addressees of the original sender of this email. If you are not an intended recipient of the original sender (or responsible for delivering the message to such person), you are hereby
notified that any review, disclosure, copying, distribution or the taking of any action in reliance of the contents of and attachments to this email is strictly prohibited. If you have received this email in error, please immediately notify the sender at the
address shown herein and permanently delete any copies of this email (digital or paper) in your possession.<o:p></o:p></span></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>